Building your email list without buying one

A good email list is made of people who chose to join it. That sounds slow, and at first it is. But a list of a few hundred people who asked to hear from you will outperform a bought list of thousands every time, and it won't put your domain on a spam blocklist.

This guide covers where sign-ups come from, how to ask, and how to keep the list healthy once it's growing.

Why bought lists don't work

It's tempting to shortcut the process. Here's why you shouldn't:

Email platforms forbid it. Mailchimp, Klaviyo, Kit, Beehiiv and most others prohibit purchased or rented lists in their terms. They can suspend your account.
It may be illegal. In the EU, UK and Canada you generally need consent before sending marketing email. People on a bought list never gave it to you.
It wrecks deliverability. Bought lists contain old addresses, spam traps and people who will mark you as spam. Gmail and Yahoo watch complaint rates closely, and a burst of complaints can push all your email, including your normal business email, into spam. See staying out of spam.
Nobody on it knows you. Even if the emails arrive, strangers don't buy.

The same goes for scraping addresses from websites or LinkedIn, or adding everyone who ever emailed you without asking.

Give people a reason to join

"Join our newsletter" is not a reason. People sign up when they can see what's in it for them. Some reasons that work:

A specific promise. "One practical marketing tip every other Tuesday" tells people exactly what they'll get.
A useful resource, often called a lead magnet: a checklist, template, guide or calculator tied to what you sell. See lead magnets explained.
First access or member-only offers, for stores and businesses with launches or limited availability.
A first-order discount, common in e-commerce. It works, but it trains some people to wait for discounts, so use it deliberately.
Event or class updates, for businesses that run them.

Where to ask

Most lists grow from several small sources. Go through this list and add a sign-up option everywhere it fits.

Your website. Put a sign-up form in the footer of every page, at the end of blog posts, and on a dedicated page you can link to. An embedded form in the middle of a relevant article often does better than a generic footer box.

Checkout and booking. Add an unticked checkbox at checkout or in your booking form: "Send me occasional emails about new products." It must be unticked by default if you have EU or UK customers.

Pop-ups, used carefully. A pop-up that appears after someone has scrolled or spent time on the page can work well. One that covers the page the moment it loads frustrates visitors, and Google warns that intrusive interstitials can make content less accessible on mobile.

In person. If customers visit you, a QR code at the counter or a sign-up tablet at events works. Ask out loud: "Want me to add you to our monthly email?"

Your social profiles. Put a sign-up link in your bio and mention the newsletter now and then, with a reason to join.

Your email signature. A one-line link under your name reaches everyone you already correspond with.

Partnerships. Swap mentions with a business that serves the same customers without competing. Beehiiv and some other platforms also have built-in recommendation features between newsletters.

Make the form easy

Ask for as little as possible. Email address alone is fine. Add first name if you'll really use it. Every extra field means fewer sign-ups.
Say what happens next. "Monthly tips. No spam. Unsubscribe anytime." sets expectations and reduces complaints later.
Confirm it worked. Show a thank-you message or page, and send a welcome email straight away.
Make it accessible. Every field needs a visible label, and the form must work with a keyboard. See web accessibility basics.

Single or double opt-in?

With single opt-in, people are added to your list as soon as they submit the form. With double opt-in, they get an email asking them to confirm first.

Single opt-in

How it works

People join as soon as they submit the form.

Upside

More sign-ups.

Downside

Typos, fake addresses and bot sign-ups get through.

✓

Double opt-in

How it works

People confirm by email first.

Upside

A cleaner list and a stronger record of consent.

Downside

Fewer sign-ups, as some never confirm.

Use it if

You've had spam sign-ups or bots, or you're in a regulated industry.

Double opt-in means fewer sign-ups, because some people never click the confirmation. In return you get a cleaner list: no typos, no fake addresses, no one signed up by someone else, and a stronger record of consent. If you've had problems with spam sign-ups or bots, or you're in a regulated industry, use double opt-in. Either way, protect your forms with a CAPTCHA or honeypot to stop bots.

Keep good records

Your platform records when and how each person signed up. Use separate forms or tags for each source (website footer, checkout, event) so you can see which sources bring people who actually open, click and buy. Over time you'll learn where to put your effort.

Keep the list healthy

Growth isn't the only measure. A smaller, engaged list delivers better than a large one full of people who never open.

Send regularly, so people remember who you are.
Remove hard bounces. Most platforms do this automatically.
Re-engage, then remove, inactive subscribers. If someone hasn't clicked anything in six months to a year, send a short "still want these?" email. Remove those who don't respond.
Honor unsubscribes immediately. Your platform does this for you. Never re-import people who unsubscribed.

Frequently asked questions

Can I add people who gave me their business card?

Handing over a card isn't the same as asking for marketing email. In the US it may be legal; in the EU, UK and Canada it's on shaky ground. The safest move is to send a single personal email inviting them to join.

How fast should my list grow?

There's no standard rate. Focus on whether new subscribers engage. A steady trickle of interested people is a good result.

Should I import my whole customer database?

Check the consent rules where your customers are first. If you can import, start with a clear introductory email explaining what they'll get and how to opt out.